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DETAILED ACTION 

• Examiner acknowledges receipt of Applicant's Amendment filed 10/26/2009. 

• Claims 1 and 10 are currently amended. 

• New claim 24 has been added. 

• Claims 1-7, 10-16, and 19-24 are pending. 

Response to Arguments 

1. Applicant's arguments, see page 11, filed 10/26/2009, with respect to the objection to 
claims 1 and 10 have been fully considered and arc persuasive. The objection to claims 1 and 10 
has been withdrawn. 

2. Applicant's arguments, see pages 12-16, filed 10/26/2009, with respect to the rejection of 
claims 1-7, 10-16, and 19-23 under 35 U.S.C. 103(a) have been fully considered but they are not 
persuasive. 

In the first paragraph of page 12, Applicant summarizes the previous rejections under 35 
U.S.C. 103(a). In the next paragraph, Applicant discusses the requirements for a prima facie 
case of obviousness. On pages 13-14, Applicant recites claim and argues that the combination of 
Calvignac, Fallon, and Cheriton does not disclose the limitations related to the routing table 
search circuit of claim 1. Specifically, on page 14, Applicant argues that the TCAM of Cheriton 
is different than a CAM because CAMs utilize binary logic. Examiner respectfully disagrees. 
While a TCAM may be a specific type of CAM, it is still reasonably interpreted as a CAM as 
required by the claim language. 
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Applicant further argues on page 15 that because the specific routing table search circuit 
is not disclosed in Cheriton, the limitation of security and classification functions being 
performed according to information from the routing table search circuit cannot be disclosed. 
Examiner respectfully disagrees and believes Cheriton to properly disclose the limitations of the 
routing table search circuit for at least the reasons indicated above. 

Applicant further argues that independent claims 10 and 19 and all dependent claims are 
allowable for the reasons indicated with respect to claim 1 . Examiner respectfully disagrees for 
at least the reasons indicated above. 

Claim Rejections - 35 USC §103 

3. The following is a quotation of 35 U.S.C. 103(a) which forms the basis for all 
obviousness rejections set forth in this Office action: 

(a) A patent may not be obtained though the invention is not identically disclosed or described as set forth in 
section 102 of this title, if the differences between the subject matter sought to be patented and the prior art are 
such that the subject matter as a whole would have been obvious at the time the invention was made to a person 
having ordinary skill in the art to which said subject matter pertains. Patentability shall not be negatived by the 
manner in which the invention was made. 

4. This application currently names joint inventors. In considering patentability of the 
claims under 35 U.S.C. 103(a), the examiner presumes that the subject matter of the various 
claims was commonly owned at the time any inventions covered therein were made absent any 
evidence to the contrary. Applicant is advised of the obligation under 37 CFR 1 .56 to point out 
the inventor and invention dates of each claim that was not commonly owned at the time a later 
invention was made in order for the examiner to consider the applicability of 35 U.S.C. 103(c) 
and potential 35 U.S.C. 102(e), (f) or (g) prior art under 35 U.S.C. 103(a). 



Application/Control Number: 10/826,668 Page 4 

Art Unit: 2467 

5. Claims 1, 6, 7, 10, 15, 16, and 19 are rejected under 35 U.S.C. 103(a) as being 
unpatentable over U.S. Patent Application Publication 2003/0231625 to Calvignac et al in view 
of U.S. Patent 7,415,540 to Fallon et al and in further view of U.S. Patent Application 
2006/0104286 to Cheriton. 

Regarding claims 1 and 10, Calvignac discloses a router for interconnecting external 
devices coupled to said router, said router comprising: 

a switch fabric (switch fabric 60 of Figure 2 and the switch fabric not shown in Figure 4A 
which connects to the switch interfaces (see paragraph 37 on page 4)); and 

a plurality of routing nodes coupled to said switch fabric (router blades 80, 90, and 100 of 
Figure 2; note that element 150 of Figure 4A is also a router blade), wherein each of said 
plurality of routing nodes comprises: 

a first network processor (the ingress portion of the router blade shown in Figure 4B; this 
can be implemented as a single chip/processor as indicated in the last sentence of paragraph 3 on 
page 1) for performing first security and classification functions (see the description of the 
classification and security (firewall) functions throughout; consider paragraphs 5 on page 1 and 
47 on page 5) associated with data packets received from said external devices and transmitted to 
said switch fabric (the ingress circuitry of Figure 4B; this circuitry clearly processes packets 
received from the external devices and transmitted to the switch fabric); and 

a second network processor (the egress portion of the router blade (analogous to the 
ingress portion shown in Figure 4B); this can be implemented as a single chip/processor as 
indicated in the last sentence of paragraph 3 on page 1) for performing second security and 
classification functions (see the description of the classification and security (firewall) functions 
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throughout; consider paragraphs 5 on page 1 and 47 on page 5) associated with data packets 
received from said switch fabric and transmitted to said external devices (the egress circuitry 
analogous to the ingress circuitry of Figure 4B; this circuitry clearly processes packets received 
from the switch fabric and transmitted to the external devices). 

Further regarding claim 10, Calvignac discloses the communication network in Figure 1. 

Similarly regarding claim 19, Calvignac discloses the method limitations which are 
analogous to the claim 1 limitations as above. 

Calvignac does not disclose expressly the limitation that the first network processor 
comprises a first plurality of microengines; the limitation that the first plurality of microengines 
performs the first security and classification functions; or the limitation that each data packet is 
distributed to a selected microengine. Calvignac also does not disclose the limitation that the 
second network processor comprises a second plurality of microengines; the limitation that the 
second plurality of microengines performs the second security and classification functions; or the 
limitation that each data packet is distributed to a selected microengine. 

However, Fallon discloses a router (10 in Figure 1) implemented using a multithreaded 
microprocessor (12 in Figure 1) which includes multiple microengines (22 in Figure 1). Fallon 
discloses that the received datagrams/packets are assigned (by the scheduler thread 318) to a 
particular processing thread (320a, 320b, etc. of Figure 3; see lines 16-21 of column 6, for 
example). Further, as indicated in lines 11-13 of column 2, for example, each microengine runs 
a particular thread. Thus, the packets are distributed to a selected microengine via the scheduler 
thread 318. 
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Calvignac and Fallon are analogous art because they are from the same field of endeavor 
of packet communications routing. At the time of the invention, it would have been obvious to a 
person of ordinary skill in the art to modify Calvignac to implement each of the ingress and 
egress processors to using the microengine implementation of Fallon. This combination of 
Calvignac and Fallon discloses the missing limitations of claims 1,10, and 19 that the first and 
second network processors comprise a plurality of microengines (each of the first and second 
network processors will comprise multiple microengines 22 as in Fallon); that the first and 
second plurality of microengines perform the security and classification functions (in the 
combination of Calvignac and Fallon, the security and classification functions performed by the 
ingress and egress processors will be implemented by the microengines); and that each data 
packet is distributed to a selected microengine (in the above combination of Calvignac and 
Fallon, when a packet is assigned to a thread, it is distributed to a particular microengine.) 

The motivation for doing so would have been to improve processing efficiency by 
providing a multithreaded implementation and doing so by minimizing the amount of time 
required to maintain packet order and data coherency as suggested in lines 17-25 of column 1. 

However, the combination of Calvignac and Fallon does not disclose expressly the 
limitation of claims 1,10, and 19 that each of the routing nodes comprises a routing table search 
circuit comprising an initial content addressable memory stage followed by a plurality of trie tree 
search table stages, wherein one of said first and second security and classification functions is 
performed according to information from the routing table search circuit. However, Cheriton 
discloses the limitation of a routing table search circuit comprising an initial content addressable 
memory stage followed by a plurality of trie tree search table stages (see Figure 2A which shows 
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a packet classifier comprised of an initial content addressable memory stage (203) followed by a 
plurality of trie tree search table stages (204 - which includes one or more trie tables in one 
embodiment; see further, paragraph 002 1 on page 3 which clearly indicates that this packet 
classifier is used to assist in routing table lookup (by making it more efficient than the prior art 
solution with a separate entry in the TCAM for each host)). Further, since Figure 2A describes a 
block diagram of a packet classifier and the function of a classifier clearly includes at least 
classification functions, Cheriton also discloses the limitation that "one of said first and second 
security and classification functions is performed according to information from the routing table 
search circuit" because at least some information from the routing table search circuit is used to 
ultimately determine the packet classification. 

Calvignac and Cheriton are analogous art because they are from the same field of 
endeavor of packet switching systems. At the time of the invention, it would have been obvious 
to a person of ordinary skill in the art to modify Calvignac, as modified above, to add a routing 
table search circuit with an initial CAM stage followed by a plurality of trie tree search table 
stages similar to that disclosed in Cheriton. The motivation for doing so would have been to 
improve the efficiency of the routing function as suggested by Cheriton in paragraph 0021. 
Therefore, it would have been obvious to combine Cheriton with Calvignac and Fallon for the 
benefit of improved efficiency to obtain the invention as specified in claims 1,10, and 19. 

Regarding claims 6 and 15, the above combination of Calvignac, Fallon and Cheriton 
discloses the limitations of parent claims 1 and 10. Calvignac does not expressly disclose the 
limitations of claims 6 and 15 that a first one of said first plurality of microengines is capable of 
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executing N threads, wherein each of said N threads performs at least one security and 
classification function. 

However, Fallon discloses the limitations of claims 6 and 15 that a first one of said first 
plurality of microengines is capable of executing N threads, wherein each of said N threads 
performs at least one security and classification function (see lines 1 1-13 of column 2 which 
indicates that each microengine is capable of running N threads (N=4 in that particular example); 
see also lines 37-65 of column 5 and lines 16-21 of column 6 which indicate that the processing 
threads are used to process the datagram/packet; as indicated above, in the combination of 
Calvignac and Fallon, the classification and security functions of Calvignac are processed by 
these threads, so each thread performs at least one security and classification function). 

Calvignac and Fallon are analogous art because they are from the same field of endeavor 
of packet communications routing. At the time of the invention, it would have been obvious to a 
person of ordinary skill in the art to modify Calvignac to implement each of the ingress and 
egress processors to using the microengine implementation of Fallon where each microengine 
can support multiple threads. 

The motivation for doing so would have been to improve processing efficiency by 
providing a multithreaded implementation and doing so by minimizing the amount of time 
required to maintain packet order and data coherency as suggested in lines 17-25 of column 1. 
Therefore, it would have been obvious to combine Fallon and Cheriton with Calvignac for the 
benefit of improved processing efficiency to obtain the invention as specified in claims 6 and 15. 
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Regarding claims 7 and 16, the above combination of Calvignac, Fallon and Cheriton 
discloses the limitations of parent claims 6 and 15. Calvignac does not expressly disclose the 
limitations of claims 7 and 16 that a first one of said second plurality of microengines is capable 
of executing M threads, wherein each of said M threads performs at least one security and 
classification function. 

However, Fallon discloses the limitations of claims 7 and 16 that a first one of said 
second plurality of microengines is capable of executing M threads, wherein each of said M 
threads performs at least one security and classification function (see lines 1 1-13 of column 2 
which indicates that each microengine is capable of running M threads (M=4 in that particular 
example); see also lines 37-65 of column 5 and lines 16-21 of column 6 which indicate that the 
processing threads are used to process the datagram/packet; as indicated above, in the 
combination of Calvignac and Fallon, the classification and security functions of Calvignac are 
processed by these threads, so each thread performs at least one security and classification 
function). 

Calvignac and Fallon are analogous art because they are from the same field of endeavor 
of packet communications routing. At the time of the invention, it would have been obvious to a 
person of ordinary skill in the art to modify Calvignac to implement each of the ingress and 
egress processors to using the microengine implementation of Fallon where each microengine 
can support multiple threads. 

The motivation for doing so would have been to improve processing efficiency by 
providing a multithreaded implementation and doing so by minimizing the amount of time 
required to maintain packet order and data coherency as suggested in lines 17-25 of column 1. 
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Therefore, it would have been obvious to combine Fallon and Cheriton with Calvignac for the 
benefit of improved processing efficiency to obtain the invention as specified in claims 7 and 16. 

6. Claims 2, 5, 11, 14, 20, and 23 are rejected under 35 U.S.C. 103(a) as being unpatentable 
over U.S. Patent Application Publication 20030231625 to Calvignac et al in view of U.S. Patent 
7,415,540 to Fallon et al in view of U.S. Patent Application 2006/0104286 to Cheriton and in 
further view of U.S. Patent 7,197,035 to Asano. 

The above combination of Calvignac, Fallon and Cheriton discloses the limitations of 
parent claims 1,10, and 19. However, combination of Calvignac, Fallon and Cheriton does not 
disclose expressly the limitations of dependent claims 2, 5, 11, 14, 20, and 23. 

Regarding claims 5, 14, and 23, Asano discloses said security and classification functions 
comprise performing a Network Address Translation (NAT) function to provide subnet 
independence throughout. Consider, for example, lines 34-41 of column 3 which describes an 
efficient NAT function as an object of Asano's inventions. Further, the Asano discloses the 
limitations of claims 2, 1 1, and 20 that the security and classification functions comprise 
replacing a source address associated with header information of a first data packet with an 
address selected from a pool of router addresses associated with said router in lines 27-35 of 
column 1 1 as well as lines 20-33 of column 12. These passages explain that the local source 
addresses of computers 12-x are replaced by a global address of the router and that this global 
address is selected from a pool of IP addresses. Calvignac and Asano are analogous art because 
they are from the same field of endeavor of high-speed packet processing. 
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At the time of the invention it would have been obvious to a person of ordinary skill in 
the art to explicitly add well known network address translation (NAT) functionality to the 
combination of Calvignac, Fallon and Cheriton. The motivation for doing so would have been 
help solve the problem of a shortage of 32-bit IP addresses as suggested by Asano in lines 18-30 
of column 1 . Therefore, it would have been obvious to combine Asano with Calvignac, Fallon 
and Cheriton for the benefit of helping solve the shortage of 32-bit IP addresses to obtain the 
invention as specified in claims 2, 5, 11, 14, 20, and 23. 

7. Claims 3, 4, 12, 13, 21, and 22 are rejected under 35 U.S.C. 103(a) as being unpatentable 
over U.S. Patent Application Publication 20030231625 to Calvignac et al in view of U.S. Patent 
7,415,540 to Fallon et al in view of U.S. Patent Application 2006/0104286 to Cheriton and in 
further view of U.S. Patent Application Publication 2004/0100956 to Watanabe. 

The combination of Calvignac, Fallon and Cheriton discloses the limitations of parent 
claims 1,10, and 19. However, combination of Calvignac, Fallon and Cheriton does not disclose 
expressly the limitations of dependent claims 3, 4, 12, 13, 21, and 22. 

Regarding claims 3, 12, and 21, Watanabe discloses the limitation that said security and 
classification functions comprise filtering a first data packet based on at least one of: I) a Layer 2 
address associated with said first data packet; 2) a Layer 3 address associated with said first data 
packet; and 3) a traffic type associated with said first data packet in paragraphs 44 and 45 of page 
3 which describe layer 3 addresses (IP addresses) and traffic types (service type) as areas of the 
header that are used by the search tree for filtering packets. Further, regarding claims 4, 13, and 
22, Watanabe discloses the limitation that said security and classification functions comprise 
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filtering a first data packet based on at least one of: i) a Layer 4 address associated with said first 
data packet; and 2) a class of service (COS) value associated with said first data packet in 
paragraphs 52-54 of page 3 which indicates that layer 4 addresses (TCP and UDP ports) can also 
be used to filter the packets. Calvignac and Watanabe are analogous art because they are from 
the same field of endeavor of high speed packet processing. 

At the time of the invention it would have been obvious to a person of ordinary skill in 
the art to add the packet filtering means of Watanabe to the combination of Calvignac, Fallon 
and Cheriton. The motivation for doing so would have been to improve the security of the 
network served by the router by implementing functionality such as a firewall. This is suggested 
by Watanabe in paragraph 4 and 10 on page 1 . Therefore, it would have been obvious to 
combine Watanabe with the combination of Calvignac, Fallon and Cheriton for the benefit of 
improved security to obtain the invention as specified in claims 3, 4, 12, 13, 21, and 22. 

Allowable Subject Matter 

8. Claim 24 is objected to as being dependent upon a rejected base claim, but would be 
allowable if rewritten in independent form including all of the limitations of the base claim and 
any intervening claims. 

Conclusion 

9. THIS ACTION IS MADE FINAL. Applicant is reminded of the extension of time 
policy as set forth in 37 CFR 1.136(a). 
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A shortened statutory period for reply to this final action is set to expire THREE 
MONTHS from the mailing date of this action. In the event a first reply is filed within TWO 
MONTHS of the mailing date of this final action and the advisory action is not mailed until after 
the end of the THREE-MONTH shortened statutory period, then the shortened statutory period 
will expire on the date the advisory action is mailed, and any extension fee pursuant to 37 
CFR 1 .136(a) will be calculated from the mailing date of the advisory action. In no event, 
however, will the statutory period for reply expire later than SIX MONTHS from the mailing 
date of this final action. 

Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to ROBERT C. SCHEIBEL whose telephone number is (571)272- 
3169. The examiner can normally be reached on Mon-Fri from 8:30 AM - 5:00 PM. 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, Pankaj Kumar can be reached on 571-272-301 1 . The fax phone number for the 
organization where this application or proceeding is assigned is 571-273-8300. 

Information regarding the status of an application may be obtained from the Patent 
Application Information Retrieval (PAIR) system. Status information for published applications 
may be obtained from either Private PAIR or Public PAIR. Status information for unpublished 
applications is available through Private PAIR only. For more information about the PAIR 
system, see http://pair-direct.uspto.gov. Should you have questions on access to the Private PAIR 
system, contact the Electronic Business Center (EBC) at 866-217-9197 (toll-free). If you would 
like assistance from a USPTO Customer Service Representative or access to the automated 
information system, call 800-786-9199 (IN USA OR CANADA) or 571-272-1000. 
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